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the computer system and its environment including the entities, the 
hierarchy thereof and non-hierarchical relations between the 
entities; and 

a processor [(26)] coupled to the [receiving means and the 
storing means] policy system and the entity memory and operable to 
refine the high-level policy definition with reference to the 
permitted refinements thereto and the stored information about the 
entities to which the high-level policy definition relates in order 
to produce a refined policy definition deployable on the computer 
system. 



including a user interface [(28)] with which a user [(10)] can 
interact with the apparatus. 



4. (amended) An apparatus [(22,44)] for use in generating 
configuration information for a computer system [(12)] employing 
hierarchical entities, the apparatus comprising: 

[means (42)] a policy system for receiving a definition [(24)] 
of a high-level policy [,] for the configuration of the computer 
system [,] and permitted refinements to that policy, the definition 
referring to a plurality of the entities; 

a user interface [(28)] with which a user [(10)] can interact 
with the apparatus; 



A 



2 . 



(amended) 



An apparatus as claimed in claim 1, and 
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a processor [(26)] coupled to the [receiving means] policy 
system and the user interface and operable, in accordance with the 
high-level policy definition, to present refinement information to 
the user via the user interface so that a refined policy definition 
deployable on the computer system can be produced. 



6. (amended) An apparatus as claimed in [any of claims 2 to 
5] claim 2 , [and] further including a library [(14)] of policy 
templates [(24)], each template including a respective such high- 
level policy definition and respective such permitted policy 
refinements, the library being coupled to the [receiving means] 
policy system , and a desired one or more of the policy templates 
being selectable by the user via the user interface for supply to 
the [receiving means] policy system . 



8. (amended) An apparatus as claimed in claim [6 or] 7 [when 
dependent on claim 3 or 5] , wherein the processor is operable, in 
accordance with the high-level policy definition, to present 
refinement options to the user via the user interface and to refine 
the high-level policy definition in dependence upon options 
selected by the user via the user interface, and wherein the 
policy template format provides for each policy template to have a 
plurality of components executable in turn by the processor, at 
least one of the components being a flow directive and causing the 
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processor to present such options to the user via the user 
interface and to jump to one of a plurality of the other components 
in dependence upon the flow directive and the selection made by the 
user via the user interface. 



9. (amended) An apparatus as claimed in [any of claims 1 to 
3, or any of claims 6 to 8 when dependent thereon] claim 1 , wherein 
at least some of the entities stored in the [storing means] entity 
memory are abstract entities, the [storing means] entity memory 
also including, for each such abstract entity, a pointer to data in 
the computer system representing an instance of that abstract 
entity. 

10. (amended) An apparatus as claimed in claim 9, wherein: 
the refined policy is in terms of a policy context referring 

to unbound entities and a policy statement; 

the apparatus includes [means (20)] a rule memory for storing 
rules for interpreting the policy statement as instructions 
executable by the computer system; and 

the processor (20) is operable, with reference to the entity 
[storing means] memory , to bind the unbound entities in the policy 
context to instances of those entities, and, with reference to the 
rule [storing means] memory , to interpret the policy statement into 
a series of instructions to the computer system referring to the 
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bound instances or derivatives of them. 



11. (amended) An apparatus [(22,44)] for use in generating 
configuration information for a computer system [(12)], the 




apparatus comprising : 



[means (20)] a policy system for receiving a policy [(18),] 
for the configuration of the computer system [,] in terms of a 
_ policy context referring to unbound entities and a policy 
*0 statement; 

,j -J [means (16)] an entity memory for storing, for each of the 

IH unbound entities, a pointer to data in the computer system 

jp 

|j representing at least one instance of that entity; 
□ [means (20)] a rule memory for storing rules for interpreting 

jly the policy statement as instructions executable by the computer 
system; and 

!sa * a processor [(20)] which is operable, with reference to the 

pointers, to bind the unbound entities in the policy context to 
instances of those entities, and, with reference to the 
interpretation rules, to interpret the policy statement into a 
series of instructions to the computer system referring to the 
bound instances or derivatives of them. 




12. (amended) An apparatus as claimed in claim [10 or] 11, 



wherein the processor is operable to determine a group of the bound 
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instances, and at least one of the instructions refers to such a 
determined group. 



13. (amended) An apparatus as claimed in claim 12, wherein, 
the processor is operable to determine, with reference to the 
entity [storing means] memory , whether such a determined group is 
already defined in the computer system and, if not, to generate 
such an instruction to create the determined group in the computer 
system. 



configuration information for a computer system employing 
hierarchical entities, the method comprising the steps of: 



receiving a definition of a high-level policy [,] for the 
configuration of the system [,] and permitted refinements to that 
policy, the definition referring to a plurality of the entities; 
and 

refining the high-level policy definition with reference to 
the permitted refinements thereto and stored information about the 
entities to which the high-level policy definition relates in order 
to produce a refined policy definition deployable on the computer 
system. 




14 . 



(amended) 



A method [for use in] of generating 



iz- 



16 . 



(amended) 



A method [for use in] of generating 
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configuration information for a computer system employing 

hierarchical entities, the method comprising the steps of: 

receiving a definition of a high-level policy, for the 

configuration of the system, and permitted refinements to that 

policy, the definition referring to a plurality of the entities; 

presenting refinement information, in accordance with the 

high-level policy definition, to a user via a user interface so 

that a refined policy definition deployable on the computer system 

:J3 can be produced. 
, tfl _ 

i_ 5 

/: 4n 18. (amended) A method as claimed in [any of claims 14 to 17] 

A Q 

claim 16 , [and] further including the steps of: 



Q 



providing a library of policy templates, each template 
including a respective such high-level policy definition and 
respective such permitted policy refinements; and 
!sa * selecting one or more of the policy templates for refinement 

in accordance with input by the user via a user interface. 

20. (amended) A method as claimed in claim 18 [or 19 when 
A dependent on claim 15 or 17] , including the steps of 

presenting refinement options, in accordance with the high- 
level policy definition, to the user via a user interface; and 
refining the high-level policy definition in dependence upon 
options selected bv the user via the user interface; 
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i j u 

^ wherein the policy template format provides for each policy 

template to have a plurality of components executable in turn 
during refinement, at least one of the components being a flow 
directive and causing such options to be presented to the user via 
the user interface and the refinement process to jump to one of a 
plurality of the other components in dependence upon the flow 
directive and the selection made by the user via the user 
interface . 



in 



id 
hi 



21. (amended) A method as claimed in claim 14 [or 15, or any 



fa j/j of claims 18 to 2 0 when dependent thereon] , wherein: 



the refined policy is in terms of a policy context referring 
to unbound entities and a policy statement; 

the stored information about at least some of the entities 
relates to abstract entities, and includes, for each such abstract 
entity, a pointer to data in the computer system representing an 
instance of that abstract entity; and 

the method further includes the steps of: binding, with 
reference to the stored information, the unbound entities in the 
policy context to instances of those entities; and interpreting, 
with reference for stored rules for interpreting the policy 
statement as instructions executable by the computer system, the 
policy statement into a series of instructions to the computer 
system referring to the bound instances or derivatives of them. 

8 
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22. (amended) A method [for use in] of generating 
^ l& configuration information for a computer system, the method 

comprising the steps of: 

receiving a policy, for the configuration of the computer 
system, in terms of a policy context referring to unbound entities 
and a policy statement; 

storing, for each of the unbound entities, a pointer to data 
in the computer system representing at least one instance of that 
iQ entity; 

x h\ storing rules for interpreting the policy statement as 

|ji instructions executable by the computer system; and 

O 

,7s binding, with reference to the pointers, the unbound entities 

in the policy context to instances of those entities; and 
\i\ interpreting, with reference to the interpretation rules, the 

policy statement into a series of instructions to the computer 
system referring to the bound instances or derivatives of them. 



A 



IS 



23. (amended) A method as claimed in claim [21 or] 22, 
further including the steps of determining a group of the bound 
instances, and referring to such a determined group in at least one 
of the instructions. 

24. (amended) [An] A method as claimed in claim 23, further 
including the steps of: determining, with reference to stored 
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information about the entities, whether such a determined group is 
already defined in the computer system; and, if not, generate such 
an instruction to create the determined group in the computer 
system. 



Please add new claims 25-28 as follows: 



--25. An apparatus as claimed in claim 4, ,and including a t 




library of policy templates, each template including a respective 
such high-level policy definition and respective such permitted 



Lfj policy refinements, the library being coupled to the policy system, 
;Tj and a desired one or more of the policy templates being selectable 

i: 

1== by the user via the user interface for supply to the policy system. 

\ fcf 

--26. An apparatus as claimed in claim 25, wherein the policy 
M templates have a common format . 

--27. An apparatus as claimed in claim 26, wherein the 
processor is operable to present the refinement information to the 
user as refinement options and to refine the high-level policy 
definition in dependence upon options selected by the user via the 
user interface to produce the refined policy definition; and 
wherein the policy template format provides for each policy 
template to have a plurality of components executable in turn by 

10 



